Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/TsXvmK-CUjRCoqlsBJmcfsb7F6M.roa
File: TsXvmK-CUjRCoqlsBJmcfsb7F6M.roa (raw, json)
Hash identifier: Kl2biQW3X57C2k5J266OGo159CGZddZbfEsNdvuvblI=
Subject key identifier: 4E:C5:EF:98:AF:82:52:34:42:A2:A9:6C:04:99:9C:7E:C6:FB:17:A3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15FE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TsXvmK-CUjRCoqlsBJmcfsb7F6M.roa
Signing time: Thu 05 Jun 2025 09:39:26 +0000
ROA not before: Thu 05 Jun 2025 09:39:26 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5630 (0x15fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 09:39:26 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4EC5EF98AF82523442A2A96C04999C7EC6FB17A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:6d:e8:dd:5f:96:42:56:c9:00:39:38:3d:
62:3c:2c:76:0f:26:6f:e1:57:b1:be:5e:c7:ac:79:
f1:5c:e9:1b:a9:11:7a:be:70:6d:30:39:e6:62:fa:
79:a0:f5:f7:21:4e:70:08:10:15:d1:c8:33:c4:a8:
61:8e:92:8c:f7:4b:84:e9:2b:79:a9:01:36:3c:56:
f5:7b:1b:05:67:c6:08:b6:e6:d4:7a:47:ee:e7:b0:
d4:0a:1f:8a:82:d8:73:8f:97:6f:a9:7d:12:09:db:
de:b5:af:77:2f:fa:df:a7:f0:87:db:f4:16:fb:3d:
09:66:b6:4d:36:cf:ef:7f:84:98:3f:a5:b8:6b:cd:
eb:86:ff:3c:26:bd:57:b8:f3:bf:fd:6a:06:0e:0f:
9b:05:72:31:11:a3:0a:ab:ee:ba:47:9d:23:d1:50:
bd:a4:3d:09:9f:92:36:04:e4:6f:f8:d4:20:5b:04:
f8:59:e2:15:fc:d2:ab:8a:0a:c9:1e:20:a2:91:70:
af:3b:be:99:3e:04:a3:40:46:9c:e6:a8:a2:30:a8:
45:3c:b7:cc:d1:cd:b0:3f:a8:21:1a:7d:1f:bf:0c:
20:1e:f8:cf:02:82:27:6f:1f:52:6f:f0:f2:d1:2f:
15:cd:e9:62:a8:5c:1f:42:1d:c0:3d:7e:a3:a0:f6:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C5:EF:98:AF:82:52:34:42:A2:A9:6C:04:99:9C:7E:C6:FB:17:A3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TsXvmK-CUjRCoqlsBJmcfsb7F6M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:f4:f2:df:ea:36:23:28:a3:be:23:d7:96:f4:d9:7e:19:9d:
15:86:d4:ac:ac:6b:b6:b0:23:bf:da:9b:c6:f9:6d:8b:80:8c:
60:d1:35:8d:66:bf:a4:52:cc:1c:51:b9:71:5c:53:ad:d4:9e:
a4:4b:49:a5:d1:45:2c:c5:a3:b5:e4:36:54:b7:d5:b4:f8:44:
71:02:85:a2:f2:ac:bc:41:a5:32:14:7b:8b:a9:f2:6b:8c:f3:
99:30:7b:94:36:dd:9f:a9:9b:f4:06:df:2f:93:c4:ab:1a:64:
3f:21:18:38:a6:86:a3:cf:7c:22:40:98:fd:d3:0c:72:2d:d4:
51:ff:94:9c:78:76:d2:b3:fc:bc:b5:b2:c0:84:01:c2:8d:36:
e6:35:be:39:5e:67:52:db:33:f4:e5:76:f6:16:af:cd:ca:ce:
10:a6:24:f0:dd:9b:01:3a:93:97:36:eb:f6:be:7b:28:f9:ff:
fa:8e:64:78:eb:d7:28:0c:1b:d7:85:e2:e8:d8:81:a7:e7:5f:
f3:4a:f6:89:27:6d:8d:33:8a:9c:96:30:8a:a3:08:d2:43:1d:
fc:95:87:1b:84:90:6a:88:fd:27:fb:ee:5f:6f:56:57:eb:7d:
f6:fa:8c:84:14:fa:4a:53:95:8d:85:b7:17:9e:5a:4c:fb:26:
ab:90:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:37:02 2025 by rpki-client